Today I learned that AWS CloudWatch alarm ARNs just interpolate the alarm name: whitespace, emoji and all.
I wonder how many people out there have regexes that assume ARNs have no whitespace, emoji, etc.
Great blog post from @permisosecurity on LLMHijacking attacks against AWS Bedrock. I remember when we first started seeing this behavior from threat actors and I couldn't figure out why they would target Bedrock. Well, I guess we have on answer. 🧵
permiso.io/blog/exploiting-h…